Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File:                     zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier:          9kUdKkHM9FDwSMvJrLLvaULDl70ggqxdIZpQl0l+lLY=
Subject key identifier:   D0:CA:79:4B:E3:81:00:8F:A0:6A:4A:6F:A7:37:86:2D:E1:D8:59:6C
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer:       /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial:       01962E99A6287558F300612AC757D235DB30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number:          07AA
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: YDAV-stFbBYknK-MHQjAFGKIviM.roa (hash: SdDeY9dzrBZujPQFvilvXbGOkdZa6vv8FLkLN5jjZVw=)
                          2: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: th2sWEcKEjPj+MYdycSvYIORfydSx/T+ClZQtNcozwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a6:28:75:58:f3:00:61:2a:c7:57:d2:35:db:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=d0ca794be381008fa06a4a6fa737862de1d8596c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:20:0f:8a:88:c4:53:b8:ea:59:37:b6:3d:
                    55:1f:17:cc:f8:31:24:ad:4d:c3:82:f9:9e:fd:82:
                    60:f5:a1:2a:07:01:5f:c3:55:ea:d1:da:62:55:9b:
                    69:7c:4b:82:fc:12:22:5e:3b:5c:c7:01:5d:c4:59:
                    4b:71:f3:7b:34:be:de:d5:ca:66:a1:b8:cb:d6:16:
                    09:ad:25:82:ac:03:29:ff:01:1e:b2:07:10:06:d2:
                    48:d4:6b:93:2d:b6:3b:89:c4:80:25:09:4f:de:c2:
                    07:dc:a3:3d:4d:96:d5:48:ed:82:22:b2:ce:1d:88:
                    c3:3e:35:69:67:17:34:7b:47:6a:ab:73:55:92:d2:
                    65:c0:fd:dc:d6:ec:f2:bd:ff:60:14:b8:71:9b:0a:
                    6b:76:17:db:9b:c3:9f:11:5d:1c:cf:1e:0c:6b:3e:
                    f2:a4:c7:6c:0d:66:81:48:3b:9d:93:8a:02:d8:d7:
                    a1:a2:21:fd:3d:6c:cc:e1:d4:9a:7c:14:f7:26:9c:
                    79:e0:a5:5e:91:19:ea:98:60:d0:c3:7a:cc:49:af:
                    07:fe:de:87:fb:c0:b3:de:d3:e5:5d:b1:c9:2f:fc:
                    fc:75:5c:a1:3e:c9:d9:e9:b1:5d:1c:fe:72:8c:2a:
                    ab:a0:1b:8b:7e:df:44:77:54:ee:90:29:51:b5:a1:
                    07:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CA:79:4B:E3:81:00:8F:A0:6A:4A:6F:A7:37:86:2D:E1:D8:59:6C
            X509v3 Authority Key Identifier:
                keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:0b:07:f4:16:ca:5f:11:f0:47:5d:92:94:b9:90:c6:03:df:
         1b:8a:81:af:3f:e0:fc:92:d9:5a:ba:9f:44:5f:5d:16:38:68:
         5f:1c:01:9b:22:b6:c9:03:41:aa:fe:a2:31:74:1d:89:1d:e6:
         b3:00:15:bd:39:e7:d2:6b:4e:83:83:b3:2a:4c:60:6c:ef:01:
         51:4c:9d:0c:43:c4:e2:bd:16:cc:6a:b5:52:d7:dd:04:55:0b:
         99:99:ad:c2:6d:be:cd:14:87:93:f4:fc:3e:6a:6d:96:1b:30:
         19:35:77:bf:c0:d4:cf:2e:62:64:32:41:7a:b4:cf:a0:10:80:
         8f:1a:c6:ce:c8:c5:5e:9b:7d:e9:c0:1a:3a:49:b9:74:9f:c5:
         82:45:36:a6:81:18:f8:c3:03:52:4a:12:a3:7e:56:27:cd:9f:
         fc:6f:49:8e:fe:95:38:f0:bc:74:4f:91:4a:00:3a:9e:e4:f2:
         94:90:26:fd:9a:f6:f4:c1:c3:9e:d0:d7:1b:46:99:48:8a:65:
         2e:51:40:cc:8b:73:33:2c:a2:3f:69:39:59:1f:44:6c:23:7c:
         95:20:95:36:5f:88:b5:50:ec:aa:90:d4:38:8f:79:64:a7:77:
         8f:96:02:fa:28:2c:56:fa:da:1c:e1:23:2a:a6:cd:5f:f1:f5:
         86:5d:74:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----